Page MenuHomeDevCentral

Create restic users and generate S3 credentials
ClosedPublic

Authored by dereckson on Sep 5 2026, 22:44.
Tags
None
Referenced Files
F57109429: D4206.id11061.diff
Sat, Nov 14, 19:41
F57061578: D4206.id11030.diff
Fri, Nov 13, 23:55
F57059216: D4206.id11062.diff
Fri, Nov 13, 23:06
F57054006: D4206.id.diff
Fri, Nov 13, 20:21
F57031326: D4206.id11030.diff
Fri, Nov 13, 07:04
F57030112: D4206.id11061.diff
Fri, Nov 13, 06:24
F56999877: D4206.id11058.diff
Thu, Nov 12, 19:23
F56794059: D4206.diff
Mon, Nov 9, 10:15
Subscribers
None

Details

Summary

We create the accounts per container and server:

  • for -amaris, every server
  • for -darak, WindRiver as experimental test
  • for -vakor, Complector

Those 13 accounts are separate OVH project users,
with separate credentials stored in Vault.

-amaris accounts are intended to be included in by-server Vault policy,
-vakor account can use a approle, as an unprivileged account can do this.

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Passed
Unit
No Test Coverage
Branch
ovh-backups-restic-users
Build Status
Buildable 6881
Build 7169: arc lint + arc unit

Event Timeline

dereckson created this revision.

Rebased. Remove version to be idempotent.

Deployed and idempotent.

This revision is now accepted and ready to land.Sep 13 2026, 23:20